This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft File: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json) Hash identifier: WAvh9miM1EYfvcDOQ01x3uRnxDN4KI1wjiS3tWth3TU= Subject key identifier: BB:A2:52:92:DD:27:FA:8B:48:EB:32:BA:2E:0C:4D:AC:47:15:E6:23 Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Certificate serial: 02A903979200DBF17B463617DCEA8389633A48F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft Manifest number: 0127 Signing time: Tue 30 Dec 2025 07:30:43 +0000 Manifest this update: Tue 30 Dec 2025 07:25:43 +0000 Manifest next update: Fri 02 Jan 2026 10:32:43 +0000 Files and hashes: 1: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: O3gcBChIby3AdjPp6ABgzZyB6Dva+5HT0HMij4bC+80=) 2: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: lS5KueYMn8bh5TmvZ4yUXAkTqzodamQRrumfFCdScxY=) 3: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: 3GH/UlTXr6NRNZJGJ2MoS7z4Pw7B7FSOkUJaeAhjsEw=) 4: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: jXxQ64IynNf9UaROvNwdTvfTlkwJClGyFCLy03gvgpE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 03:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a9:03:97:92:00:db:f1:7b:46:36:17:dc:ea:83:89:63:3a:48:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Validity Not Before: Dec 30 07:25:43 2025 GMT Not After : Jan 2 10:32:43 2026 GMT Subject: CN=BBA25292DD27FA8B48EB32BA2E0C4DAC4715E623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2f:3f:d1:8c:ec:50:33:a0:ad:10:df:f5:fd: 01:26:07:00:40:fe:3d:fd:50:7e:b1:21:eb:25:29: 32:b4:25:a1:3e:c0:a6:09:81:fc:24:bf:08:31:3d: f9:8e:34:d6:1f:b2:54:b0:4b:39:67:d3:5d:71:4e: b0:e1:37:ba:0b:5f:61:75:d4:13:75:a9:e8:17:34: 87:e8:c7:f0:14:cb:29:2c:6e:72:bd:b9:4b:93:17: 00:31:dd:d8:ec:8a:cf:46:4c:05:ac:0a:bd:a1:50: 54:7d:e5:ec:2d:d5:04:52:22:da:ea:0b:55:a0:1d: 86:f8:4c:17:a0:fa:6a:6e:5b:f2:d8:db:5c:df:70: cd:21:e6:40:c3:2a:a8:f6:9f:ff:ad:0d:51:1a:c2: 2c:2d:2e:15:2a:51:cc:39:6b:41:42:eb:b0:f0:db: b1:e2:ee:eb:9e:02:86:5d:0d:c8:97:27:cf:e9:30: a3:d9:7f:a6:28:25:8d:92:d9:e1:91:01:4e:93:88: 4e:d4:b2:c5:ab:3c:20:c3:e1:f5:4e:4f:97:01:50: b3:69:06:b6:08:17:72:b8:a2:c9:1b:19:4c:41:b8: da:e8:17:75:7a:f4:b3:31:38:5d:7a:9b:aa:9a:fe: e5:e7:aa:11:21:b7:5f:fd:e2:17:40:6f:e6:98:d5: 0c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A2:52:92:DD:27:FA:8B:48:EB:32:BA:2E:0C:4D:AC:47:15:E6:23 X509v3 Authority Key Identifier: keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c6:5c:5e:16:98:7d:72:b4:c6:6f:00:92:99:b2:0a:7a:c6: 24:3d:91:07:0a:11:78:2a:3f:21:a7:46:1d:67:1f:9a:b6:f9: 02:c9:a5:db:1c:82:f6:1e:c3:57:5b:8e:17:05:a0:0a:0f:07: 91:32:4d:1e:ab:7e:ab:f7:f7:2d:9f:99:ba:e5:41:82:16:47: 58:1c:fd:36:92:7b:8c:1d:28:59:52:03:1c:54:89:50:d4:4e: 59:1c:fe:34:c2:8b:ab:6b:e2:f4:d7:fe:07:22:e2:6d:f7:13: ca:dc:b2:20:90:fd:d6:39:de:38:fd:13:d6:2c:1b:fc:5f:de: 7e:b8:8f:d5:90:04:28:6f:3b:87:40:7b:20:d7:ae:7f:fb:2d: 3a:1b:56:00:30:42:9b:d1:d0:0e:a2:e2:aa:71:6f:20:e1:e9: 10:b0:dd:8d:21:e9:f9:f7:02:f9:a1:e5:5d:e1:6d:06:5e:0d: f7:5a:89:10:69:6a:08:e5:98:4d:f2:de:fb:d5:4f:88:46:50: 75:a5:af:39:a6:33:ca:49:0c:9f:9e:5d:33:1b:e5:f6:36:47: c0:ee:29:15:a1:ac:7a:09:e1:f0:a7:f9:e6:8f:02:37:a3:33: 79:74:c9:31:ac:83:58:9e:45:80:48:8b:93:39:d4:70:12:b3: 86:81:a0:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAqkDl5IA2/F7RjYX3OqDiWM6SPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJF MzlCRjhFODAeFw0yNTEyMzAwNzI1NDNaFw0yNjAxMDIxMDMyNDNaMDMxMTAvBgNV BAMTKEJCQTI1MjkyREQyN0ZBOEI0OEVCMzJCQTJFMEM0REFDNDcxNUU2MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdLz/RjOxQM6CtEN/1/QEmBwBA /j39UH6xIeslKTK0JaE+wKYJgfwkvwgxPfmONNYfslSwSzln011xTrDhN7oLX2F1 1BN1qegXNIfox/AUyyksbnK9uUuTFwAx3djsis9GTAWsCr2hUFR95ewt1QRSItrq C1WgHYb4TBeg+mpuW/LY21zfcM0h5kDDKqj2n/+tDVEawiwtLhUqUcw5a0FC67Dw 27Hi7uueAoZdDciXJ8/pMKPZf6YoJY2S2eGRAU6TiE7UssWrPCDD4fVOT5cBULNp BrYIF3K4oskbGUxBuNroF3V69LMxOF16m6qa/uXnqhEht1/94hdAb+aY1QzJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu6JSkt0n+otI6zK6LgxNrEcV5iMwHwYDVR0j BBgwFoAUy1TcUm+iFPn3NpJuaqoWq+Ob+OgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9DQjU0REM1MjZG QTIxNEY5RjczNjkyNkU2QUFBMTZBQkUzOUJGOEU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJFMzlC RjhFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2 QUJFMzlCRjhFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrGXF4WmH1ytMZvAJKZsgp6xiQ9kQcKEXgq PyGnRh1nH5q2+QLJpdscgvYew1dbjhcFoAoPB5EyTR6rfqv39y2fmbrlQYIWR1gc /TaSe4wdKFlSAxxUiVDUTlkc/jTCi6tr4vTX/gci4m33E8rcsiCQ/dY53jj9E9Ys G/xf3n64j9WQBChvO4dAeyDXrn/7LTobVgAwQpvR0A6i4qpxbyDh6RCw3Y0h6fn3 Avmh5V3hbQZeDfdaiRBpagjlmE3y3vvVT4hGUHWlrzmmM8pJDJ+eXTMb5fY2R8Du KRWhrHoJ4fCn+eaPAjejM3l0yTGsg1ieRYBIi5M51HASs4aBoC0= -----END CERTIFICATE-----Generated at Tue Dec 30 20:21:42 2025 by rpki-client